WordPress Accordion FAQ Plugin <= 2.2.1 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Accordion FAQ versions = 2.2.1...

WordPress Flexible FAQ Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Flexible FAQ versions = 0.2...

WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Legion Hunter in WordPress Plugin Helpie FAQ versions = 1.45...

CVE-2025-58200 WordPress Flexible FAQ Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bage Flexible FAQ flexible-faq allows Cross Site Request Forgery.This issue affects Flexible FAQ: from n/a through = 0.2...

CVE-2025-58200

CVE-2025-58200 : CSRF vulnerability in the Flexible FAQ (WordPress plugin). Documented as affecting Flexible FAQ up to version 0.2; no public exploit details in the provided sources. The connected docs confirm a CSRF issue in this plugin, but remediation/version specifics beyond 0.2 are not provi...

CVE-2025-58200 WordPress Flexible FAQ Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bage Flexible FAQ flexible-faq allows Cross Site Request Forgery.This issue affects Flexible FAQ: from n/a through = 0.2...

CVE-2025-58659 WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...

CVE-2025-58659 WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...

CVE-2025-58659

CVE-2025-58659 affects the WordPress plugin Helpie FAQ (FAQ/Docs/KB – Helpie) with an unauthenticated sensitive information exposure. Public details in connected data identify Helpie FAQ as the affected software, up to version 1.39, and indicate the issue is an unauthenticated exposure of embedde...

WordPress plugin Helpie FAQ 信任管理问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A vulnerability in...

WordPress plugin Bage Flexible FAQ 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-38884

Name of the Vulnerable Software and Affected Versions Bage Flexible FAQ versions through 0.2 Description A Cross-Site Request Forgery CSRF issue exists in Bage Flexible FAQ. This allows for the execution of unwanted actions on behalf of an authenticated user. Recommendations At the moment, there ...

CVE-2025-58200: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Bage Flexible FAQ flexible-faq allows Cross Site Request Forgery.This issue affects Flexible FAQ: from n/a through = 0.2...

CVE-2025-58659: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...

PT-2025-38948

Name of the Vulnerable Software and Affected Versions Essekia Helpie FAQ versions through 1.39 Description A hard-coded credentials issue exists in Essekia Helpie FAQ, potentially allowing retrieval of embedded sensitive data. The issue affects the application's functionality related to...

CVE-2025-8686

CVE-2025-8686 details from the provided documents: The WordPress plugin WP Easy FAQs (WP Easy FAQs) is vulnerable to Stored Cross-Site Scripting (Stored XSS) via the WP_EASY_FAQ shortcode due to insufficient input sanitization and output escaping on user-supplied attributes. The flaw affects all ...

CVE-2025-57425

A Stored Cross-Site Scripting XSS vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint...

WordPress Accordion FAQ plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Accordion FAQ versions = 2.2.1...

CVE-2025-57425

A Stored Cross-Site Scripting XSS vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint...

SourceCodester FAQ Management System 安全漏洞

SourceCodester FAQ Management System is an open source question and answer management system from SourceCodester. A security vulnerability exists in version 1.0 of the SourceCodester FAQ Management System, which stems from the update-faq.php endpoint that does not clean up the question and answer...